Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
File: Lz_LZCXVmOS4ewSRez75UJ47VsA.mft (raw, json)
Hash identifier: 8v/WWzcEPJzQYFBEJIhyGpeMRnaPbJl85UneHJ4HKtE=
Subject key identifier: AD:21:F6:45:EA:DB:5D:CA:7C:B3:72:14:16:86:2F:4C:FB:F8:5C:78
Authority key identifier: 2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
Certificate issuer: /CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Certificate serial: 01A1795F103E4410027E29A344FA47501E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
Manifest number: 0DCC
Signing time: Mon 26 Oct 2026 18:00:35 +0000
Manifest this update: Mon 26 Oct 2026 18:00:35 +0000
Manifest next update: Tue 27 Oct 2026 18:00:35 +0000
Files and hashes: 1: Lz_LZCXVmOS4ewSRez75UJ47VsA.crl (hash: ZIXpB+RJ5H1NqrojfNzxNoftjLExSBLuovCBjkdDtVU=)
2: doW0mpCnrwRns3RIOxChwkliLTE.roa (hash: GsqyaGjy8E4RJKoWLdZmSypIUlVFghPNcYphYfam9qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 18:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:5f:10:3e:44:10:02:7e:29:a3:44:fa:47:50:1e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Validity
Not Before: Oct 26 18:00:35 2026 GMT
Not After : Oct 27 18:00:35 2026 GMT
Subject: CN=ad21f645eadb5dca7cb3721416862f4cfbf85c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:24:e5:b2:ea:c5:44:44:9c:fc:1a:f3:de:89:
be:6a:bc:3b:fb:27:08:98:9a:08:84:37:e9:e1:fd:
e6:fe:ff:44:4b:8a:1e:58:10:cb:c9:39:dc:16:a2:
5e:09:9d:39:05:7b:92:83:fb:88:f4:b6:9f:85:79:
f5:dc:6c:3e:6d:95:13:c3:94:5d:5e:80:77:ea:95:
1b:97:88:51:e8:e2:02:b3:84:ab:29:c4:23:ff:76:
ee:90:ac:64:1c:ea:49:62:30:c6:3f:20:5c:a3:96:
0a:63:fe:0f:0c:52:3b:d0:11:ae:e5:b5:01:d3:15:
c0:7d:9b:65:82:1b:43:ee:46:00:c0:c9:58:71:09:
98:6b:17:83:67:1b:98:2e:4d:c6:78:92:2a:f6:94:
f0:95:6e:97:77:72:61:33:bd:c4:c0:05:38:9a:5f:
c5:a7:2b:93:7f:19:58:ad:24:ed:8d:8d:ef:25:bc:
f9:f6:a5:07:b7:9d:dc:36:7e:7f:67:e5:2a:77:19:
b8:db:c2:b0:a0:e3:53:ea:06:44:58:e1:82:4c:72:
e7:b6:da:73:0c:1d:5d:27:61:c9:38:48:8d:12:55:
73:42:08:3e:66:55:7b:14:34:dc:7e:ca:ba:70:22:
97:0c:6c:e7:5e:d0:5f:2e:87:bb:94:2e:a1:2e:72:
64:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:21:F6:45:EA:DB:5D:CA:7C:B3:72:14:16:86:2F:4C:FB:F8:5C:78
X509v3 Authority Key Identifier:
keyid:2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fb:ff:6d:fd:98:0a:ea:d4:d4:44:d1:b0:af:1a:86:f5:65:
5c:20:31:44:d5:74:8d:ff:94:10:c3:39:17:10:e9:0f:0a:4e:
a8:75:2d:4e:59:35:fe:60:b2:b6:e3:f9:1c:85:83:58:5f:9d:
b7:27:ae:26:64:64:dc:ac:38:a5:9b:b6:5e:8f:30:d4:2f:42:
2f:dc:da:2f:ad:5b:bd:ba:41:75:29:d6:a0:ef:29:2f:4e:6c:
2e:cb:5a:df:57:25:36:50:54:ac:75:67:c5:1a:6d:f4:f8:64:
92:0e:cf:d1:10:a0:26:aa:1d:89:41:28:08:8d:96:cb:08:bd:
41:31:ef:9e:71:be:f0:3b:2c:a2:c2:7c:02:e6:06:e3:a8:ae:
44:76:11:68:96:fc:b6:cf:8f:2d:84:78:8d:b5:69:14:b4:35:
5a:83:1c:c8:0c:d1:31:bb:c0:db:62:a7:14:29:ca:66:de:88:
3d:66:b4:d2:9a:39:7c:fe:41:b0:0d:dd:48:84:4a:6e:1c:6e:
3e:72:a3:c0:df:b9:48:1d:e1:d5:48:b0:e2:f0:35:3b:d9:a4:
fc:f0:36:b3:a2:58:db:af:a3:33:28:7d:10:d1:06:ed:34:b4:
10:bd:ba:64:12:f6:63:ac:33:35:2c:84:bb:82:2c:12:df:04:
1d:9c:18:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:38:55 2026 by rpki-client